CVE-2015-1856: Medium severity Openstack Swift vulnerability
Published Apr 17, 2015
·Updated
OpenStack Object Storage (Swift) before 2.3.0, when allowversion is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.
Affected Software
5 affected componentsFixes available
pip/swift<2.3.0
2.3.0
Openstack Swift<=2.2.2
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=15.04
Event History
Apr 17, 2015
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
May 14, 2022
Advisory Published
via GitHub·03:59 AM
Frequently Asked Questions
1
What is the severity of CVE-2015-1856?
CVE-2015-1856 is considered a moderate severity vulnerability.
2
How do I fix CVE-2015-1856?
To fix CVE-2015-1856, upgrade OpenStack Object Storage (Swift) to version 2.3.0 or later.
3
What software is affected by CVE-2015-1856?
CVE-2015-1856 affects OpenStack Object Storage (Swift) versions prior to 2.3.0.
4
What type of vulnerability is CVE-2015-1856?
CVE-2015-1856 is a privilege escalation vulnerability that allows remote authenticated users to delete object versions.
5
Can CVE-2015-1856 be exploited by unauthenticated users?
No, CVE-2015-1856 requires that the attacker is a remote authenticated user.